Protection against XSS, using JQuery text() escape